Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-03052
HistoryJan 12, 2023 - 12:00 a.m.

SAP NetWeaver AS Access Control Error Vulnerability

2023-01-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
sap
netweaver
access control
vulnerability
attack
api
unauthorized operations

0.003 Low

EPSS

Percentile

66.1%

SAP NetWeaver AS is a SAP Web Application Server from SAP Germany. It not only provides network services, but is also the basic platform for SAP software. The Java-based SAP NetWeaver AS version 7.50 contains an access control error vulnerability that stems from improper access control and could be exploited by an unauthenticated attacker to attach to open interfaces and access services using open naming and directory APIs, which could be used to perform unauthorized operations affecting users and data on the current system.

CPENameOperatorVersion
sap sap netweaver aseq7.5

0.003 Low

EPSS

Percentile

66.1%

Related for CNVD-2023-03052